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Abstract 

. . . We prove a quantum query lower bound ri(n''''''"^^/'-''+^'') for the problem of deciding 

f^ I whether an input string of size n contains a fc-tuple which belongs to a fixed orthogonal 

array on k factors of strength d < k ~ I and index 1, provided that the alphabet size is 

sufficiently large. Our lower bound is tight when d — k — I. 

The orthogonal array problem includes the following problems as special cases: 



o 

(N 



^ 



r^. • fc-sum problem with d — k ~ 1, 

^^ ■ • fc-distinctness problem with d — 1, 

- fc-pattcrn problem with d = 0, 

{d — l)-degree problem with 1 < d < fc — 1, 
^1^1 • unordered search with d = and fc = 1, and 

■y ■ • graph collision with d — and k — 2. 

O-i' 1 Introduction 

1.1 History 

> 

V/^ . One of two main techniques for proving lower bounds on quantum query complexity of Boolean 

■^ I functions is the adversary method developed by Ambainis [Amb021 lAmbOG] and independently 

by Barnum, Saks, and Szegedy [BSS03 ] as a generalization of the "hybrid argument" introduced 
by Bennett, Bernstein, Brassard, and Vazirani [B BBV97J for the Or function. 
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Q ! The adversary bound was strengthened by H0yer, Lee, and Spalek |HLS07] to the negative- 

cn '_ weight adversary lower bound, which we define in Section [2J This stronger version was proved 

to be optimal by Reichardt [Reillj . and shown to apply to non-Boolean functions and also to 
the more general setting of state generation and conversion by Lee, Mittal, Reichardt, Spalek, 

S>^ I and Szegedy [LMR"*"!!] . Although the negative- weight adversary lower bound is known to be 

H ' tight, for a long time it had not been used to prove lower bounds for explicit functions. Vast 

- ■ ■ majority of lower bounds by the adversary method used the old positive-weight version of this 

method, and the only bounds which utilized the power of negative weights were for functions on 
a constant number of bits and their compositions, and these bounds were obtained by numeric 
optimization. 

The other main technique for quantum query lower bounds is the polynomial method de- 
veloped by Beals, Buhrman, Cleve, Mosca, and de Wolf [BBC"'"01] . This method is in general 
incomparable to the adversary method. Ambainis showed several iterated functions for which 
the adversary method gives polynomially larger bounds |Amb06) . On the other hand, the 
polynomial method gives stronger bounds for low-error and zero-error algorithms |BCWZ99] . 
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Another example where the polynomial method used to give stronger bounds than the 
adversary method is the element distinctness function. The input to the function is a string 
of length n of symbols in an alphabet of size q, i.e., x = (xi, . . . ,x„) G [q]^. We use notation 
[q] to denote the set {1, ... ,g}. The element distinctness function evaluates to if all symbols 
in the input string are pairwise distinct, and to 1 otherwise. The quantum query complexity 
of element distinctness is 0{n'^'^) with the algorithm given by Ambainis |Amb07] . Tight lower 
bounds were given by Aaronson and Shi |AS04j . Kutin [KutOSj . and Ambainis |Amb05| using 
the polynomial method. 

The positive-weight adversary bound, however, fails for element distinctness. The reason 
is th at this function has 1-certificate complexity 2, and the so-called certificate complexity bar- 
rier [SS06^ IZhaOSj implies that for any function with 1-certificate complexity bounded by a 



constant, the positive-weight adversary method cannot achieve anything better than i}{^yn). 



The negative- weight adversary bound is not limited by this barrier [HLSOT], but showing an 
explicit adversary lower bound breaking the certificate complexity barrier for this function or, 
in fact, for any function on more than a constant number of bits was open for a long time. 



Belovs and Spalek [BS13J were the first to show such an explicit lower bound. They re- 
proved the r2(n'^'^) lower bound for element distinctness using the negative- weight adversary 
method, and generalized it to the following problem. Let G be a finite Abelian group, t G G 
its arbitrary element, and k an arbitrary but fixed constant. The k-sum problem consists in 
deciding whether the input string xi, . . . , x^ G G contains a subset of k elements that sums up 
to t. This problem was first posed by Childs and Eisenberg |CE05] . who noted that it is the 
hardest problem among all problems with 1-certificate complexity /c, because knowledge of any 
k — 1 input values doesn't reveal any information about whether that [k — l)-tuple can be a 
part of a 1-certificate or not, and they conjectured that its complexity is Q,{n '^ ~^^'). Belovs 
and Spalek |BS13J resolved this conjecture in the positive. 

The Q{n '^^^') lower bound for the A:-sum problem is tight thanks to the quantum algorithm 
based on quantum walks on the Johnson graph |Amb07] . This algorithm was first designed 
to solve the k- distinctness problem. This problem asks for detecting whether the input string 
X G [(7]" contains k elements that are all equal. Element distinctness is the same as 2-distinctness. 
Soon enough it was realized that the same algorithm works for any function with 1-certificate 
complexity k [CE 05J, in particular, for the A;-sum problem. The quantum query complexity of 
this algorithm is 0{n '^ ~^^'), and the algorithm is thus optimal for the A:-sum problem. 

Quantum walk on the Johnson graph is not optimal for the ^-distinctness problem when k > 
2. Belovs and Lee showed a ground-breaking quantum algorithm for a certain promise version 
of this problem based on learning graphs running in 0{n^~'^ ' " ~^') = o{n^''^) queries |BLllj . 
which Belovs then improved to an algorithm for full /c-distinctiness |Bell2j with the same query 
complexity. However, none of these two algorithms is time-efficient. Very recently, Belovs 
and independently Childs, Jeffery, Kothari, and Magniez described two new quantum walk 
algorithms for 3-distinctness, not based on learning graphs, running in time 0{n^''^) [BellSbl 
ICJKM13] . The best known lower bound for the ^-distinctness problem is just Q.{n'^'^), by a 
reduction from element distinctness. 

1.2 Our result 

In this paper, we generalize /c-distinctness, fc-sum, and several other problems, and express 
them as special cases of a general family of functions, characterized by orthogonal arrays. Let 
us define orthogonal arrays first. We use the following notation. For an x = (xi, . . . ,x„) G X" 
and 5 C [n], let xs denote the projection of x on 5, i.e., the vector (x^^, . . . , x^^) where si, . . . , S£ 
are the elements of S in the increasing order. 



Definition 1 (Orthogonal array |Rao47t[HSS99j ). Let X be an alphabet. Assume T is a subset of 
X of size A • |X| for integers < d < A: — 1 and A > 1. We say that T is a d-{X, k, A) orthogonal 
array iff, for every subset of indices D C [A;] of size d and for every vector (yi, . . . ,2/^) G X'^, 
there exist exactly A strings (xi, . . . ,Xk) G T such that xd = V- We call d the strength, k the 
number of factors, A the index of the array, and \X\ the alphabet size. We call T linear if X is 
a finite field, and the elements of T form a subspace of the vector space X . 

In this paper, we restrict ourselves to orthogonal arrays of index A = 1. 

Definition 2 (Consistent collection of orthogonal arrays). Assume that each subset S of [n] of 
size k is equipped with a d-{X,k,l) orthogonal array T5. A collection {Ts}s of orthogonal 
arrays is called consistent iff, for every pair of subsets 81,82 C [n] of size k with | S*! n 52 1 > d, 
their corresponding orthogonal arrays are consistent. We say that Ts-^ is consistent with Ts^ iff, 
for every Z? C 5i n ^2 of size d and every vector (yi, . . . , yd) G X'^, the unique vectors x^ G Tg^ 

and x^ G Ts^ satisfying x^ = x|) = y are consistent on the whole intersection 81 Ci 82, i.e., 

1 2 

^5in52 ~ ^Sin52- 

Definition 3 (Orthogonal array problem). Let {T^}^ be a collection of d-{X,k,X) orthogonal 

arrays. The d-{X, k. A) orthogonal array problem, consists in finding an element of any of the 

orthogonal arrays in the input string. More precisely, the input x G X" evaluates to 1 iff there 

exists a subset 8 C [n] of size k such that xs G Tg. If the collection is consistent, we call the 

problem a consistent orthogonal array problem.. 



as a convenient 



The orthogonal array problem was first defined by Belovs and Spalek |BS13 
tool to prove a tight lower bound for the /c-sum problem, and it was also used by Belovs 
and Rosmanis |BR12| to prove a lower bound on the quantum query complexity of certificate 
structures. Both these papers only use a special case of orthogonal arrays with strength k — 1, 
whereas we allow for any strength d < k — 1. 

Consider the following orthogonal array problems. The first three examples have been widely 
studied before. The last two examples are new, at least in the context of this paper. 

Example 1 (/c-distinctness problem |Amb071IBell2] ). Let X be any alphabet. T = {x^ : x G X} 
is a 1-{X, k,l) orthogonal array. A collection of these arrays is consistent. 

Example 2 (A;-sum problem |CE051 IBSISJ ). Let G be an Abelian group and t G G. T = 
{{xi, . . . , Xk) G G'^ : '}Zi=i ^i = t} is a (A; — 1)-(G, k, 1) orthogonal array. A collection of these 
arrays is consistent. 

Example 3 (Unordered search |BBBV97l IGro97] ). Let X be any alphabet and x G X. T = {x} 
is a 0-(X, 1, 1) orthogonal array. Unordered search is equal to the 1-sum problem. 

Example 4 (A;-pattern problem). Let X be any alphabet. For each A:-tuple 8, fix a string 
yS g ^fc_ j,^ _ lySj ^g ^ 0-(X, k, 1) orthogonal array. 

If the collection {T^j^ of the orthogonal arrays is consistent, then the A;-pattern problem is 
equivalent to k unordered searches without replacement, because there exists a unique vector 
y G X" such that y = ys- If the collection is inconsistent, then the A;-pattern problem is more 
general than unordered search. For example, the graph collision problem |MSS07j is a special 
case of the 2-pattern problem. See our open problems for a more detailed discussion. 

Example 5 (d-degree problem). Let F be a finite field and Q < d < k — 2. For each A;-tuple S, 
let Ts = {xs G F'^ : 3ao, . . . a^ G F : Vs G S : x^ = Xllo "'•^'l- ^s is a linear {d + 1)-(F, k, 1) 
orthogonal array. 

A collection of these orthogonal arrays is consistent thanks to the way we consistently use 
the indices s G S* as the points at which the polynomials are evaluated. Had we, for example, 
instead sorted the elements of S in an increasing order, indexed them by [k], and defined the 



polynomial at these points, we would have obtained a different collection of {d + 1)-(F, k, 1) 
orthogonal arrays, which is not consistent. 

/c-distinctness and /c-sum represent two extreme examples of orthogonal array problems, 
differing by their strength, and the ri-orthogonal array problem naturally interpolates between 
them. Given that the quantum query complexity of the k-sum problem is known and the 
complexity of ^-distinctness is open, it is natural to ask how large lower bound can one prove 
for the d-orthogonal array problem, as a function of d. We address this question and prove the 
following result. 

Theorem 4 (Main result). For a fixed k and < d < k — 1, an alphabet X, and any collection 
of d-{X,k,l) orthogonal arrays Ts, the quantum query complexity of the d-{X,k,l) orthogonal 
array problem is Q{n^'^~^^''^'^~^'^^) provided that \X\ > n^/i^-d-i. The constant behind the big- 
Omega depends on k and d, but not on n, \X\, or the choice ofTs- The collection of orthogonal 
arrays may or may not be consistent. 

The proofs in our paper are straightforward extensions of the corresponding proofs of the 



quantum query lower bound for the fc-sum problem [BS13|. 

Our lower bound for ^-distinctness is direct, meaning that it doesn't use reduction from 
element distinctness, and it gives the same bound Q.{n'^i^). The lower bound for the d-orthogonal 
array problem grows with growing d until it reaches its maximal value Q.{n '^ '^'^') for the fc-sum 
problem, where the bound is optimal. We don't know whether our bound is optimal for any 
d <k-l. 

We conjecture that any consistent d-{X, k, 1) orthogonal array problem can be solved in 
o[n^'^'^^^>) quantum queries when d < /c — 1, using learning graphs like in |Bell2j . That 
includes the {d — l)-degree problem. Finding such an algorithm is one of our open problems. 

2 Adversary Lower Bound 

In this paper we are interested in the quantum query complexity of the ^-([g], k, 1) orthogonal 
array problem. For the definitions and main properties of quantum query complexity refer to, 
e.g., Ref. [BW02J . For the history, definitions, and relationships between various quantum query 



lower-bound methods refer to, e.g., Ref. [HS05] . For the purposes of our paper, it is enough to 



define the adversary bound, which we do in this section. 



We use the formulation from Ref. BS13J. Compared to the original formulation of the 
negative- weight adversary bound HLS07 , this formulation is different in two aspects. First, 
in order to simplify the notation, we call an adversary matrix a matrix with rows labeled by 
positive inputs, and columns by negative inputs. It is a quarter of the original adversary matrix 
that completely specifies the latter. Second, due to technical reasons, we allow several rows 
to be labeled by the same positive input. All this is captured by the following definition and 
theorem. 

Definition 5. Let / be a function f : D ^- {0, 1} with domain 2? C [g]". Let P be a set of pairs 
(x,a) with the property that the first element of each pair belongs to P, and T>i = {{x,a) £ 
D : /(x) = i} for i E {0, 1}. An adversary matrix for the function / is a non-zero real Di x Dq 
matrix F. For an i G [n], let Aj denote the 2?i x Dq matrix defined by 



A,[(x,a),(y,6)l 



u, Xi — yi, 
1, otherwise. 



Theorem 6 (Adversary bound HLS07[ |BS13J ). In the notation of Definition [21 Qiif) = 
Jl(Adv=^(/)), where 

Adv± (/) = max ^^^^ , „ (1) 

r maxie„||roAi|| 

where the maximization is over all adversary matrices for f , || • || is the spectral norm, and 
Q2{f) is the quantum query complexity of f. 

3 Proof 

In this section we prove Theorem U using the adversary lower bound, Theorem [6l The idea 
of our construction is to embed the adversary matrix T into a slightly larger matrix T with 
additional columns. Then F o Aj is a sub-matrix of T o Aj, hence, ||r o Aj|| < ||r o Aj||. (In 
this section we use Aj to denote all matrices defined like in Definition O with the size and the 
labels of the rows and columns clear from the context.) It remains to prove that ||r|| is large, 
and that ||r|| is not much smaller than ||r||. 

The proof is organized as follows. In Section [3?T] we define T depending on certain parameters 
am, in Section[22]we analyze its norm, in Sections l3.3l andl 3.4l we calculate ||roAj||, in Section [531 
we optimize am, and, finally, in Section [321 we prove that the norm of the true adversary matrix 
r is not much smaller than the norm of T. 

3.1 Adversary matrix 

Matrix F consists of (^) matrices Gsi,...,s^: stacked one on another for all possible choices of 
subset S = {si, . . . , Sk} C [n]: 



r 



/ _ Gl,2,...,k \ 

Gl^2,...,k-l,k+l 

\ Gn-k+l,n-k+2,...,n J 



(2) 



Each Gs is a q"--'=+" x g" matrix with rows indexed by inputs (xi, . . . ,Xn) G [q]^ such that 
xs £ Ts, and columns indexed by all possible inputs (yi, . . . ,yn) G [q]"'- 

We say that a column with index y is invalid if ys G Ts for some 5 C [n] . After removing all 
invalid columns, Gs will represent the part of F with the rows indexed by the inputs having an 
element of the orthogonal array on S. Note that some positive inputs appear more than once 
in F. More specifically, an input x appears as many times as many elements of the orthogonal 
arrays it contains. 

This construction may seem faulty, because there are elements of [g]" that are used as labels 
of both rows and columns in F, and hence, it is trivial to construct a matrix F such that the 
value in ([!]) is arbitrarily large. However, we design F in a specifically restrictive way so that it 
still is a good adversary matrix after the invalid columns are removed. 

Let Jq be the q x q all-ones matrix. Assume cq, . . . ,eq-i is an orthonormal eigenbasis of 
Jg with eo = 1/y^ " (Ij • • • j 1) being the eigenvalue q eigenvector. Consider the vectors of the 
following form: 

i^ = e„j (g) e^2 (g) • • • (g) e„„ , (3) 

where Vi G {0, . . . ,q — 1}. These are eigenvectors of the Hamming Association Scheme on [g]". 
For a vector v from ([3|), the weight |?;| is defined as the number of non-zero entries in (ui, . . . , Vn)- 

in) 

Let £^^ , for A; = 0, . . . ,n, be the orthogonal projector onto the space spanned by the vectors 



from (I3D having weight k. These are the projectors on the eigenspaces of the association scheme. 
Let us denote Ei = E^ for i = 0, 1. These are g x q matrices. All entries of £"0 are equal to 
1/g, and the entries oi Ei = I — Eq are given by 

Eilx,yl = < 

[-l/q, x^y. 

Elements of S in Gs should be treated differently from the remaining elements. For them, 
we define a q x q matrix Fs- It has rows labelled by the elements of Ts and columns by the 
elements of [q]^, and is defined as follows. 

Definition 7. Let 

\u\<d 

be the projector onto the subspace spanned by the vectors of weight at most d. Let Fs be 
qi^-d.)/'^ times the sub- matrix of -E^j consisting of only the rows from Ts- 

Finally, we define F as in ([2]) with Gs defined by 

n—k 
m=0 

where Fs acts on the elements in S and E^ acts on the remaining n—k elements. The coefficients 
Om will be specified later. 

3.2 Norm of f 

Lemma 8. Let F be like in (0j with Gs defined as in l^^. Then 

(a) \\f\\ = 0(Qon'=/2), 

(b) \\f\\ = 0(maXmamra*=/2). 

(k) 

Proof. Fix a subset S and denote T = Ts and F = Fs- Recall that -E^j is the sum of uu* over 

~ (k) 

all u = Cui (8) • • • (8) e^tj, with at least k — d elements Uj equal to 0, and F is the restriction of E^^ 
to the rows in T. 

For u = eui ■ ■ ■ e^j, and L C [k] of size \L\ = k — d such that ul = e^ , let u^ denote 

the q(^~'^)''^ multiple of u restricted to the elements in T. The reason for the superscript is that 
we consider the following process of obtaining u : we treat T as [q] by erasing the elements 
indexed by L in any string of T, then u^ coincides on this set with u with the L-terms removed. 

In this notation, the contribution from uu* to F equals u^u*, where L^ is any set oi k — d 
positions in u containing cq. In general, we do not know how the u^ vectors relate for different 
L. However, we know that, for a fixed L, they are all orthogonal; and for any L, (e® ) is the 
vector l/yg^- (1, ..., 1). ^ ^ 

Let us start with proving (a). We estimate ||F|| from below by w*Tw' , where w and w' are 
unit vectors with all elements equal. In other words, ||F|| is at least the sum of all its entries 



divided by \l {jjl'^^^'^ ^- ^"^ order to estimate the sum of the entries of F, we rewrite ([!]) as 



where the summation is over ah u and v such that at least one of them contains an element 
different from cq. The sum of all entries in the first term of ([5]) is aoQ'"~^' "'^. The sum of 
each column in each of (n^" (>^ v){u ^ v)* is zero because at least one of n^" or v sums up to 

zero. By summing over all (^) choices of S, we get that ||r|| > ao\/(fc) = J^(ao'^^ )• 

In order to prove (b), express Fs as J2Lc[k]:\L\=k-d^s ^^^^ ^s — J2u£Ul '"'^^*- ^^^^ Wl} 
is an arbitrary decomposition of all u such that Ul contains only u with eo in the L-positions. 



Define Gg as in (JH) with Fs replaced by F^, and F as in ([2]) with Gs replaced by G{ 
Since all u^ vectors are orthogonal for a fixed L, we get that 



{G^fG^ 



y^ a^^|(n(g)i;)(n(g)i;)*, 



thus ||(G )*G II = maXmCKm- ^Y the triangle inequality, 



'-^L\\2 



L\^T^L 



(r^)T 



E(^^)*G', 



< 



n 



maxa^ 



Since F = YliLc\k\-\L\=k~d^^ ^^"^ (fc-d) ~ ^(1)> another application of the triangle inequality 
finishes the proof of (b). D 



3.3 Action of Ai 

The adversary matrix is symmetric in all input variables and hence it suffices to only consider 
the entry-wise multiplication by Ai. Precise calculation of ||r o Ai|| is very tedious, but one 
can get an asymptotically tight bound using the following trick. Instead of computing F o Ai 

directly, we arbitrarily map F i — > Fi such that Fi o Ai = F o Ai, and use the inequality 
||Fi o Aill < 2||Fi|| that holds thanks to 72(Ai) < 2 [LMR"*"!! . In other words, we change 
arbitrarily the entries with xi = yi- We use the mapping 



Eo I — > Eq , 



E^ 



-En 



(6) 



(k) 

The projector E'^j is mapped by A i as 



E^^] ^ Eo^Ef-'-^ 



It follows that 



'<d 



F A F, 



E 



U^^U* 



(7) 
(8) 



ui=0,\u\=d 



where n " is defined like in the proof of Lemma [8j For a subset L C [k] of size |L| = k — d that 
contains 1 G L, 



F' A (F' 



E 

\u\=d 



L * 
U U 



(9) 



where F and Ul is defined like in the proof of Lemma EJ^b) . 



3.4 Norm of Ti 

Lemma 9. Let T be like in ^ with Gs defined as in ^, and map T i — > Ti, Gs i — > (Gs)i, 
and Fs i — h {Fs)i using (0j and ^. Then 

\\Ti\\ = O (max (max{amm'^^'^n^'^^'^^'^'>^'^, {am — am+i)"- 



\ m 



Proof. In order to prove the upper bound, we express Fi = X^^Tf', {Gs)i = ^^li^s)^^ ^^^ 
(-^5)1 = Z]Lc[fcl-|L|=fc-d(-^s )i' ^^^^ ™ ^^^ proof of Lemma Ellb), and upper-bound each Hrf || 
separately. Note that even though L is a subset of [k] and not S, we can still use L to select 
a subset of elements of S if each S is ordered in the ascending order. Sl = {si : i £ L} for 
S = {si,. . . ,Sk}. 

We have ||rf||2 = ||(rf')*rf|| = \\J2s(Gs)iiGs)i\\- Decompose the set of all possible k- 
tuples of indices into S1US2, where 5i are A:-tuples containing 1 and ^2 are A:-tuples that don't 
contain 1. We upper-bound the contribution of 5i to HrfP by maXmOmC^j^ )C^~k^i-d ) ^^^ 
the contribution of ^2 by maxm(am — «m+i)^("^ ), and apply the triangle inequality. 

Let V = Cy-^ <Si • • • ey^ with \v\ = m + d, and let S £ Si. Then, by Q, 



(G^sh^ 



OimV^^, vi = 0, \vs\ = d, and \vs^\ = 
0, otherwise. 



Here vs = (g),^^ e^, and v^^^ = q^^ ^^1'^ ®^^\n]-S^ «„,• 

For different u, these are orthogonal vectors, and hence v is an eigenvector of {G\Yy{G\)\ 
of eigenvalue a^ if v\ = 0, \vs\ = d, and |t;5^| = 0, and of eigenvalue otherwise. For every v 
with vi = and \v\ = m + d, there are ('"j' ) ("■'^™]~_ J ) sets S £ Si such that \vs\ = d, and 
hence at most as many sets S £ Si such that {G^)iv 7^ 0. We apply the triangle inequality, 
and conclude that the contribution of Si is as claimed. 

Now consider an S G ^2, that means 1 ^ S. 

n—k 

G^s = J] a™F# i^^"-') 

m=0 

n—k 

(n-k-l)^ 



m=0 

n—k 

^ Y: a^Fs' <^Eo^ {E^:-'-'^ - eI::^-'^ ) 

n—k 



m=0 

Therefore {Gg)i is of the same form as Gg, but with coefficients (a^ — Om+i) instead of am 
and on one dimension less. We get the required estimate from Lemma [8]^b). 

There are (j,_^) sets L C [k] of size \L\ = k — d. Since k,d = 0(1), one more application of 
the triangle equality gets the claimed bound. D 



3.5 Optimization of a^ 

To maximize the adversary bound, we maximize ||r|| while keeping ||ri|| = 0(1). That means, 
we choose the coefficients {om} to maximize agra '^ (Lemma [8|) so that, for every m, Um < 
j^-(i/2^(d+i-fc)/2 ^^^ Q,^ ^ am+i +n~^/'^ (Lemma[9]). 

For every r G [n], oq < ar+rn'^ '"^ < r~ '"^n^ '^'^^ ''"^ +rn~ ''^ . The expression on the right- 
hand side achieves its minimum, up to a constant, ao = 2 fi\d+'^)/{d+'2)-k/2 £qj, ^ _ ^{d+i) / {d+2) ^ 
This corresponds to the fohowing solution: 

«". = -" {2 - ;^<3T5k^. »} »<■'«'"■'*''-'■'' (10) 

With this choice of am, ||r|| = Viiaon^/'^) = Jl(n('^+i)/('^+2))_ 

3.6 Constructing V from F 

The matrix F gives us the desired ratio of norms of F and F o Aj. Unfortunately, F cannot 
directly be used as an adversary matrix, because it contains invalid columns y with f{y) = 1, 
that is, y that contain an element of the orthogonal array on S* C [n] : |5| = k, i.e., ys G Tg. 
We show that after removing the invalid columns the adversary matrix F is still good enough. 

Lemma 10. Let F he the sub-matrix ofV with the invalid columns removed. Then ||Fo Ai|| < 
||Fo Aill, and ||F|| is still O(aon'^/^) when q > n^/(''-'^\ 

Proof. We estimate ||F|| from below by w*Tw' using unit vectors vu,w' with all elements equal. 
Recall Equation ([5]): 

Gs = aoe^("+'-'=)(e^")* + 5]a|„|(tx^" ^v){u^ v)* , 

u,v 

where the summation is over all u and v such that at least one of them contains an element 
different from cq. The sum of each column in each of (w^" v){u v)* is still zero because at 
least one of n " or v sums up to zero. Therefore the contribution of the sum is zero regardless 
of which columns have been removed. 

By summing over all (^) choices of S, we get 

1 1 Ti 1 1 ^^ *T^ / 

||i II > w i w = 

where ey denotes the sub- vector of e restricted to V, and V is the set of valid columns. Since 
both Co and vu' are unit vectors with all elements equal, and w' is supported on V, (e®"')yty' = 

^/\V\/¥■■ 

Let us estimate the fraction of valid columns. The probability that a uniformly random 

input y £ [q]^ contains an orthogonal array at any given A;-tuple S is q . By the union bound, 

the probability that there exists such S is at most (^q'^~^- Therefore the probability that a 

random column is valid is |F|/(?" > 1 — {^q'^~^ , which is ri(l) when q > n^l^^~'^\ Q 

Thus, with the choice of a^ from (JTO]), we have Adv^(/) = ^{aon^^'^) = J^(n('^+i)/('^+2)). 
This finishes the proof of Theorem [H 




4 Open problems 

• Our lower bound Q,[n^ ~^^>'^ '^'^') for the d-{X, k, 1) orthogonal array problem is only known 
to be optimal when the strength d = k — 1. This variant corresponds to the A;-sum 



problem BS13 , for which one can prove a matching 0{n '^ '^^') upper bound by quantum 
search on the Johnson graph j Amb07j . For the /^-distinctness problem, which lies at the 
other end of the spectrum with the strength d = 1, there is a quantum algorithm running 
in 0{'n}~'^ '(^ ~^') = o{'n?''^) queries |Bell2] . which is polynomially faster for A; > 3. 
Can one close the gap, say, in the simplest case d = 1 and A; = 3, whose complexity lies 
between Q.{v?/^) and 0(n^/'^)? 

Our lower bound only depends on d but not on A;, as long as A: = 0(1). This seems unlikely 
to be optimal. Can one strengthen the lower bound for larger A;? 

Consider the A:-pattern problem, i.e., the 0-(X, A:,l) orthogonal array problem. If the 
patterns are consistent, then the problem is equivalent to k repeated unordered searches 
without replacement, and its complexity is Q{^/n). If the patterns are inconsistent, then 
our lower bound stays Q.{y/ri), but the best known upper bound is just 0{n '^^^>). 

The inconsistent A;-pattern problem includes several interesting problems as special cases. 
For example, graph collision [MSS07J is a 2-pattern problem and finding an ^-clique is an 
(2) -pattern problem [Bell3a] . Given a fixed graph {V, E) on n vertices and an n-bit input 
X, the graph collision problem is to decide whether there exists an edge {i,j} S E with 
Xi = Xj = 1. Given a fixed vertex set F, and edges E specified by an input black-box, 
the i-clique problem is to decide whether the graph {V, E) contains a clique of size L 
Both these problems look solely for input variables labeled by 1, and the hardness of the 
problem comes from the fact that not every subset of input variables is admissible. The 
patterns specified for non-edges resp. non-cliques of the graphs are labeled by a dummy 
symbol that is not a part of the input alphabet. 

Our lower bound works regardless of whether the orthogonal arrays are consistent or not, 
which means that it might not be strong enough for inconsistent orthogonal arrays. Can 
one prove an a;(-^/n) lower bound for the inconsistent A;-pattern problem? Proving this 
would be a good step towards proving an u;(-^/n) lower bound for graph collision. 

It is conceivable that the query complexity of the A;-pattern problem can be anything 
between Q.{y/n) and 0{n^'^^~^^'), depending on the combinatorial structure of the collec- 
tion of patterns. For a consistent collection, we get Q{^/n), and the more "inconsistent" 
the orthogonal arrays are the larger the lower bound might be. Can one lower-bound 
the query complexity of the inconsistent A;-pattern problem in terms of some positive 
semidefinite program simpler than the full negative-weight adversary bound? Using du- 
ality of semidefinite programming, can one then find a matching quantum algorithm, like 
in Ref. [Reillj ? 

It is conceivable that the learning graph for A;-distinctness [Bell2| can be "interpolated" 
with the learning graph for the A:-sum problem, and solve the consistent d-{X, k, 1) orthog- 
onal array problem. (Essentially, one would load the first d elements normally, and the 
remaining k — d elements with only partial uncovering of loaded elements.) Unfortunately, 
there are many subtle details in the analysis of the learning graph for A:-distinctness, which 
makes the task of generalizing it difficult. If one addresses all issues, what would the com- 
plexity of the learning graph for the consistent d-{X,k,l) orthogonal array problem be, 
as a function of d? It will probably not match our lower bound, since there is currently a 
gap even for A;-distinctness (with d = 1), but can one at least design a quantum algorithm 
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that for a fixed d > 1 runs faster than n^ ^^^> for all k, i.e., whose complexity doesn't 
approach Q,{n^^°^^^') when k grows? 

The o(n^''^)-coniplexity learning graph for ^-distinctness |Bell2| can be cast as a learning 
graph for the consistent 1-{X, k, 1) orthogonal array problem. The learning graph crucially 
depends on the consistency of the orthogonal sets. Can one generalize this learning graph 
to not require consistent orthogonal sets? This is likely to be hard, witnessed by the rich 
combinatorial structure of the inconsistent /c-pattern problem. 

Belovs and Rosmanis have recently generalized the Q,{n '^ ~^^') lower bound for the /c-sum 



problem BS13 to a more general framework of certificate structures |BR12j . Roughly 
speaking, they show strong lower bounds for the learning graph complexity of several 
common certificate structures (for example, Q{nP''^) for triangle finding) and then they 
show that for each certificate structure there exists a black-box function with that cer- 
tificate structure whose query complexity satisfies the same lower bound. Their functions 
are based on orthogonal arrays of strength k — 1 when the 1-certificate size is k. Their 
collections of orthogonal arrays are consistent, because any collection of {k — 1)-(X, k, 1) 
orthogonal sets is necessarily consistent. In the case of triangle finding, their method gives 
a nearly tight lower bound for the triangle sum problem. Can their method be combined 
with our result to obtain nontrivial quantum query lower bounds for functions based on 
orthogonal arrays of smaller strengths? 

• Our technique relies crucially on the n^/i^^<^) lower bound on the alphabet size. Can 
one relax this bound? This will probably require an entirely new design of the adversary 
matrix. 

• We have only proved a lower bound for the d-{X, k, A) orthogonal array problem with 
index A = 1. Extending our proof to larger A seems straightforward. Is there a natural 
problem with A > 1 for which one can prove a nontrivial lower bound? 
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